CVE-2016-2818

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-2818
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html Third Party Advisory
http://www.debian.org/security/2016/dsa-3600 Third Party Advisory
http://www.debian.org/security/2016/dsa-3647
http://www.mozilla.org/security/announce/2016/mfsa2016-49.html Vendor Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
http://www.securityfocus.com/bid/91075
http://www.securitytracker.com/id/1036057 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-2993-1 Third Party Advisory
http://www.ubuntu.com/usn/USN-3023-1
https://access.redhat.com/errata/RHSA-2016:1217 Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1392 Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1234147 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1256493 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1256739 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1256968 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1261230 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1261752 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1263384 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1264575 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1265577 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1267130 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1269729 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1273202 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1273701 Issue Tracking Permissions Required
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html Third Party Advisory
http://www.debian.org/security/2016/dsa-3600 Third Party Advisory
http://www.debian.org/security/2016/dsa-3647
http://www.mozilla.org/security/announce/2016/mfsa2016-49.html Vendor Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
http://www.securityfocus.com/bid/91075
http://www.securitytracker.com/id/1036057 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-2993-1 Third Party Advisory
http://www.ubuntu.com/usn/USN-3023-1
https://access.redhat.com/errata/RHSA-2016:1217 Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1392 Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1234147 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1256493 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1256739 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1256968 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1261230 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1261752 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1263384 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1264575 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1265577 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1267130 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1269729 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1273202 Issue Tracking Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1273701 Issue Tracking Permissions Required
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mozilla:firefox:45.1.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:45.1.1:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*
cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
cpe:2.3:a:novell:suse_package_hub_for_suse_linux_enterprise:12:*:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
History

21 Nov 2024, 02:48

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - Third Party Advisory
References () http://www.debian.org/security/2016/dsa-3600 - Third Party Advisory () http://www.debian.org/security/2016/dsa-3600 - Third Party Advisory
References () http://www.debian.org/security/2016/dsa-3647 - () http://www.debian.org/security/2016/dsa-3647 -
References () http://www.mozilla.org/security/announce/2016/mfsa2016-49.html - Vendor Advisory () http://www.mozilla.org/security/announce/2016/mfsa2016-49.html - Vendor Advisory
References () http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - () http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html -
References () http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - () http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html -
References () http://www.securityfocus.com/bid/91075 - () http://www.securityfocus.com/bid/91075 -
References () http://www.securitytracker.com/id/1036057 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1036057 - Third Party Advisory, VDB Entry
References () http://www.ubuntu.com/usn/USN-2993-1 - Third Party Advisory () http://www.ubuntu.com/usn/USN-2993-1 - Third Party Advisory
References () http://www.ubuntu.com/usn/USN-3023-1 - () http://www.ubuntu.com/usn/USN-3023-1 -
References () https://access.redhat.com/errata/RHSA-2016:1217 - Third Party Advisory () https://access.redhat.com/errata/RHSA-2016:1217 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2016:1392 - Third Party Advisory () https://access.redhat.com/errata/RHSA-2016:1392 - Third Party Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1234147 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1234147 - Issue Tracking, Permissions Required
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1256493 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1256493 - Issue Tracking, Permissions Required
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1256739 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1256739 - Issue Tracking, Permissions Required
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1256968 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1256968 - Issue Tracking, Permissions Required
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1261230 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1261230 - Issue Tracking, Permissions Required
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1261752 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1261752 - Issue Tracking, Permissions Required
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1263384 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1263384 - Issue Tracking, Permissions Required
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1264575 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1264575 - Issue Tracking, Permissions Required
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1265577 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1265577 - Issue Tracking, Permissions Required
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1267130 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1267130 - Issue Tracking, Permissions Required
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1269729 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1269729 - Issue Tracking, Permissions Required
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1273202 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1273202 - Issue Tracking, Permissions Required
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1273701 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1273701 - Issue Tracking, Permissions Required

22 Oct 2024, 13:54

Type Values Removed Values Added
CPE cpe:2.3:a:mozilla:firefox_esr:45.1.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:45.1.0:*:*:*:*:*:*:*

21 Oct 2024, 13:11

Type Values Removed Values Added
CPE cpe:2.3:a:mozilla:firefox_esr:45.1.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:45.1.1:*:*:*:*:*:*:*
Information

Published : 2016-06-13 10:59

Updated : 2024-11-21 02:48

NVD link : CVE-2016-2818

Mitre link : CVE-2016-2818

CVE.ORG link : CVE-2016-2818

JSON object : View

Products Affected

canonical

  • ubuntu_linux

redhat

  • enterprise_linux_for_scientific_computing
  • enterprise_linux_workstation
  • enterprise_linux_desktop
  • enterprise_linux_for_power_big_endian
  • enterprise_linux_for_ibm_z_systems_eus
  • enterprise_linux_server_eus
  • enterprise_linux_for_ibm_z_systems
  • enterprise_linux_for_power_little_endian_eus
  • enterprise_linux_server_aus
  • enterprise_linux_for_power_little_endian
  • enterprise_linux_server
  • enterprise_linux_for_power_big_endian_eus

opensuse

  • leap
  • opensuse

mozilla

  • firefox

debian

  • debian_linux

novell

  • suse_linux_enterprise_desktop
  • suse_linux_enterprise_software_development_kit
  • suse_package_hub_for_suse_linux_enterprise
  • suse_linux_enterprise_server
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer